{"metadata": {"vulnerability": "cve-2017-20188", "count": 22, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 14}}, "data": [{"timestamp": "2017-07-24T00:00:00Z", "date_only": false, "value": "2017-07-24T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2017-20188", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2023-12-31T01:00:00Z", "date_only": false, "value": "2023-12-31T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2017-20188", "field": "containers.cna.timeline.2.time", "text": "VulDB entry created"}, {"timestamp": "2023-12-31T16:18:28.239Z", "date_only": false, "value": "2023-12-31T16:18:28.239Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2017-20188", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-31T17:23:37Z", "date_only": false, "value": "2023-12-31T17:23:37.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2017-20188", "field": "containers.cna.timeline.3.time", "text": "VulDB entry last update"}, {"timestamp": "2024-01-01T06:01:37.307Z", "date_only": false, "value": "2024-01-01T06:01:37.307483Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-20188", "record": "GSD-2017-20188", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-02T14:31:02.916Z", "date_only": false, "value": "2024-01-02T14:31:02.916Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2017-20188", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-02T14:31:02.916Z", "date_only": false, "value": "2024-01-02T14:31:02.916Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2017-20188", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-02T15:15:08Z", "date_only": false, "value": "2024-01-02T15:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-47RP-456R-H3XF", "record": "GHSA-47RP-456R-H3XF", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-01-02T15:15:08.377Z", "date_only": false, "value": "2024-01-02T15:15:08.377", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-20188", "record": "FKIE_CVE-2017-20188", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-02T15:15:08.377Z", "date_only": false, "value": "2024-01-02T15:15:08.377", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2017-20188", "record": "GSD-2017-20188", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2024-01-02T15:30:25Z", "date_only": false, "value": "2024-01-02T15:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-47RP-456R-H3XF", "record": "GHSA-47RP-456R-H3XF", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-02T15:30:25Z", "date_only": false, "value": "2024-01-02T15:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-47RP-456R-H3XF", "record": "GHSA-47RP-456R-H3XF", "field": "modified", "linked_record": true}, {"timestamp": "2024-01-02T16:26:26Z", "date_only": false, "value": "2024-01-02T16:26:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/161866", "record": "CVE-2017-20188", "field": "creation_timestamp", "uuid": "7c9eab89-8798-4701-971a-3d305c608467", "content": "https://ift.tt/8zUOZXu\nCVE-2017-20188", "url": "https://t.me/ctinow/161866"}, {"timestamp": "2024-01-03T01:35:44Z", "date_only": false, "value": "2024-01-03T01:35:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/74182", "record": "CVE-2017-20188", "field": "creation_timestamp", "uuid": "acf46ff9-cb39-4fcb-a291-742774304e58", "content": "\u203c\ufe0fCVE-2017-20188\u203c\ufe0f\n\nA vulnerability has been found in Zimbra zmajax up to 8.8.1 and classified as problematic. Affected by this vulnerability is the function XFormItem.prototype.setError of the file WebRootjsajaxdwtxformsXFormItem.js. The manipulation of the argument message leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 8.8.2 is able to address this issue. The identifier of the patch is 8d039d6efe80780adc40c6f670c06d21de272105. It is recommended to upgrade the affected component. The identifier VDB249421 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74182"}, {"timestamp": "2024-01-22T10:41:29Z", "date_only": false, "value": "2024-01-22T10:41:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/171080", "record": "CVE-2017-20188", "field": "creation_timestamp", "uuid": "929ffb47-cfa3-4dd9-9d70-e827334e99a5", "content": "https://ift.tt/A8ckh0P\nCVE-2017-20188 | Zimbra zm-ajax up to 8.8.1 XFormItem.js XFormItem.prototype.setError message cross site scripting", "url": "https://t.me/ctinow/171080"}, {"timestamp": "2024-04-11T00:58:25.490Z", "date_only": false, "value": "2024-04-11T00:58:25.490", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-20188", "record": "GSD-2017-20188", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-08-05T21:45:26.120Z", "date_only": false, "value": "2024-08-05T21:45:26.120Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2017-20188", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T19:10:42.301Z", "date_only": false, "value": "2025-05-08T19:10:42.301368Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-20188", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-08T19:10:42.301Z", "date_only": false, "value": "2025-05-08T19:10:42.301368Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-20188", "record": "FKIE_CVE-2017-20188", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-06-03T14:45:46.867Z", "date_only": false, "value": "2025-06-03T14:45:46.867Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2017-20188", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-03T14:45:46.867Z", "date_only": false, "value": "2025-06-03T14:45:46.867Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-20188", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T01:15:21.933Z", "date_only": false, "value": "2026-06-17T01:15:21.933", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-20188", "record": "FKIE_CVE-2017-20188", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T13:46:00.236Z", "anchors": {"origin": {"timestamp": "2024-01-02T14:31:02.916Z", "date_only": false, "value": "2024-01-02T14:31:02.916Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2017-20188", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-01-02T14:31:02.916Z", "date_only": false, "value": "2024-01-02T14:31:02.916Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2017-20188", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 90371697.320033, "hours": 25103.249255564722, "days": 1045.9687189818635, "min_seconds": 90371697.320033, "max_seconds": 90371697.320033, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-02T14:31:02.916Z", "date_only": false, "value": "2024-01-02T14:31:02.916Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2017-20188", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T13:46:00.236Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}